69
guys? (lemmy.blahaj.zone)
submitted 2 weeks ago by to c/cybersecuritymemes@lemmy.world
8 comments fedilink hide all child comments
 

a graph showing the number of computer vulnerabilities by week since 1990, increasing exponentially in the last couple months.

all 8 comments

sorted by: hot top controversial new old
[–] 50 points 2 weeks ago (4 children)

This shows number of discovered and publicly revealed ones.

The vulnerabiliries were mostly there already, just waiting in secret.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 18 points 2 weeks ago (3 children)

    oh well, in that case i guess everything will be just fine. awesome!

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 15 points 2 weeks ago* (last edited 2 weeks ago) (1 child)

    This is just spunge bob showing up the huge pile of trash all over.

    In my 30 years carrier of sw eng there was not a single company i worked for that would take security seriosly enough. Not even the two banks I worked for, the security focus was higher there, but nowhere close to enough. Deadlines had to be met, shareholders had to be made happy. Security is the type of investment the better you do it the more invisible it looks and is easy for managers to put lower on the backlog.

    The ocasional security researcher I had the privilidge to talk to or work with always had few vulnerabilities in pocket to report in case they dry up on the findings.

    Good luck to the overworked understuffed teams in an average company.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • [–] 20 points 2 weeks ago (2 children)

    LLM's are fast readers with pattern matching capabilities and few inhibitions to try things out. Interesting times ahead.

  • permalink
  • fedilink
  • source
  • hideshow 2 child comments
    •
  • [–] 4 points 2 weeks ago

    It's also important to know that some of these CVEs require super niche or unusual configuration to be exploited. This doesn't make them less valid, than elf that llms are good at is chaining exploits.

    What it does do is make the defender's job significantly more difficult because how do you both stay up on all the latest vulnerabilities, but then also find valid patches without resorting to using vibe coding?

  • permalink
  • fedilink
  • source
  • parent
  • [–] 2 points 2 weeks ago

    It's also worth pointing out that the fact there is a new breed of exploit discovery tools itself is creating a new focus on finding and fixing security exploits.

    Many (perhaps the majority?) of these were not discovered by AI agents, but were found due to extra thorough testing due to the fear of security issues being found by AI agents.

  • permalink
  • fedilink
  • source
  • parent